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AMENDMENTS TO THE CLAIMS 

This listing of claims replaces all prior versions, and listings, of claims in the application: 
Listing of Claims: 

1 . (Currently Amended) In a station that is capable of communicating with at least 
one access point in a communications network, a method for creating a secure association 
between the station and at least one access point, the method comprising: 

obtaining discovery information from one or more access points in the 
communications network, the discovery information reflecting capabilities of the one or 
more respective access points to facilitate communication with the station; 

selecting one of the access points to become associated with; 

authenticating the selected access point; 

sending a discovery verification request to the selected access point for the 
discovery information of the selected access points to be verified , wherein the discovery 
verification request includes at least part of the discovery information obtained from the 
access point ; and 

receiving an acknowledgement receipt from the selected access point verifying 
the discovery information. 

2. (Original) A method as recited in claim 1, wherein the discovery verification 
request includes an identifiable security object obtained during authentication. 

3. (Original) A method as recited in claim 2, wherein the identifiable security object 
includes at least one of an encryption key, a certificate and a hash number. 

4. (Original) A method as recited in claim 1, wherein authenticating the access point 
includes identifying a certificate from a trusted certificate authority. 

5. (Original) A method as recited in claim 4, wherein the trusted certificate authority 
is a server of the communications network 
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6. (Original) A method as recited in claim 1, wherein authenticating the access point 
is part of a mutual authentication that also involves the access point authenticating the station. 

7. (Original) A method as recited in claim 1, further including an act of sending a 
frame to the access point after receiving the acknowledgment receipt, wherein the frame includes 
a verifiable key that indicates to the access point that the frame is actually received from the 
station. 

8. (Original) A method as recited in claim 7, wherein the frame includes a 
management frame configured to control the secure association between the access point and the 
station. 

9. (Original) A method as recited in claim 8, wherein the management frame is 
configured to terminate the secure association. 
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10. (Currently Amended) A computer program product for use in a station that is 
capable of communicating with at least one access point in a communications network, the 
computer program product comprising one or more computer-readable storage media storing 
having computer-executable instructions for implementing a method for creating a secure 
association between the station and at least one access point, the method comprising: 

obtaining discovery information from one or more access points in the 
communications network, the discovery information reflecting capabilities of the one or 
more respective access points to facilitate communication with the station; 
selecting one of the access points to become associated with; 
authenticating the selected access point; 

sending a discovery verification request to the selected access point for the 
discovery information of the selected access points to be verified , wherein the discovery 
verification request includes at least part of the discovery information obtained from the 
access point ; and 



receiving an acknowledgement receipt from the selected access point verifying 
the discovery information. 

11. (Original) A computer program product as recited in claim 10, wherein the 
discovery verification request includes an identifiable security object obtained during 
authentication. 

12. (Original) A computer program product as recited in claim 11, wherein the 
identifiable security object includes at least one of an encryption key, a certificate and a hash 
number. 

13. (Original) A computer program product as recited in claim 10, wherein 
authenticating the access point includes identifying a certificate from a trusted certificate 
authority. 

14. (Original) A computer program product as recited in claim 13, wherein the trusted 
certificate authority is a server of the communications network 
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15. (Original) A computer program product as recited in claim 10, wherein 
authenticating the access point is part of a mutual authentication that also involves the access 
point authenticating the station. 

16. (Original) A computer program product as recited in claim 10, wherein the 
method further includes an act of sending a frame to the access point after receiving the 
acknowledgment receipt, wherein the frame includes a verifiable key that indicates to the access 
point that the frame is actually received from the station. 

17. (Original) A computer program product as recited in claim 16, wherein the frame 
includes a management frame configured to control the secure association between the access 
point and the station. 

18. (Original) A computer program product as recited in claim 17, wherein the 
management frame is configured to terminate the secure association. 
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19. (Currently Amended) In an access point that is capable of communicating with at 
least one station in a communications network, a method for creating a secure association 
between the station and at least one access point, the method comprising: 

providing discovery information to the station, the discovery information 
reflecting capabilities of the access point to facilitate communication with the station; 

providing a certificate with the discovery information that is used by the station to 
authenticate the access point; 

receiving a discovery verification request from the station for the discovery 
information to be verified , wherein the discovery verification request includes at least 
part of the discovery information provided to the station ; and 

sending an acknowledgement receipt to the station, thereby verifying the 
discovery verification request to the station. 

20. (Original) A method as recited in claim 19, wherein the discovery verification 
request includes an identifiable security object obtained during authentication of the access point 
by the station. 

21. (Original) A method as recited in claim 20, wherein the identifiable security 
object includes at least one of an encryption key, a certificate and a hash number. 

22. (Original) A method as recited in claim 19, wherein the certificate is signed by a 
server of the communications network 

23. (Original) A method as recited in claim 19, further including an act of 
authenticating the station as an authorized network device. 
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24. (Currently Amended) A computer program product for use in an access point that 
is capable of communicating with at least one station in a communications network, the 
computer program product comprising one or more computer-readable storage media storing 
having— computer-executable instructions for implementing a method for creating a secure 
association between the station and at least one access point, the method comprising: 

providing discovery information to the station, the discovery information 
reflecting capabilities of the access point to facilitate communication with the station; 

providing a certificate with the discovery information that is used by the station to 
authenticate the access point; 

receiving a discovery verification request from the station for the discovery 
information to be verified , wherein the discovery verification request includes at least 
part of the discovery information provided to the station ; and 

sending an acknowledgement receipt to the station, thereby verifying the 
discovery verification request to the station. 

25. (Original) A computer program product as recited in claim 24, wherein the 
discovery verification request includes an identifiable security object obtained during 
authentication of the access point by the station. 

26. (Original) A computer program product as recited in claim 25, wherein the 
identifiable security object includes at least one of an encryption key, a certificate and a hash 
number. 

27. (Original) A computer program product as recited in claim 24, wherein the 
certificate is signed by a server of the communications network 

28. (Original) A computer program product as recited in claim 24, the method further 
including an act of authenticating the station as an authorized network device. 

29—40. (Canceled) 
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41. (Previously Presented) In a station that is capable of communicating with at least 
one access point in a communications network, a method for creating a secure association 
between the station and at least one access point, the method comprising: 

obtaining discovery information from one or more access points in the 
communications network, the discovery information reflecting capabilities of the one or 
more respective access points to facilitate communication with the station; 

selecting one of the access points to become associated with and identifying 
discovery information associated therewith; 

authenticating the selected access point by identifying a certificate associated with 
the discovery information, the certificate being signed by a trusted source, and receiving 
an identifiable security object indicating successful authentication ; and 

validating the selected access point discovery information by: 

sending a discovery verification request to the selected access point, 

wherein the discovery verification request includes at least a part of the discovery 

information obtained from the selected access point . [[a]]_the identifiable security 

object, or both, and 

receiving an acknowledgement receipt from the selected access point 

verifying the discovery information obtained from the selected access point , 

wherein if verified the acknowledgement receipt includes the security object or a 

derivative thereof. 

42. (Previously Presented) A method as recited in claim 41, wherein the identifiable 
security object includes at least one of an encryption key, a certificate and a hash number. 

43. (Canceled) 
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